Function handleGithubAuth

api/src/services/auth.ts:17–86

(req: BunRequest)

}

export async function handleGithubAuth(req: BunRequest) {
  console.log("Handling GitHub authentication...");
  const params = new URLSearchParams(req.url.split("?")[1]);
  const { code, state } = Object.fromEntries(params.entries());

  // Get the auth result which includes tokens
  const authResult = (await appOctokit.auth({
    type: "oauth-user",
    code: code,
    state: state,
  })) as Record<string, any>;

  // Create user Octokit instance with the tokens
  const userOctokit = new Octokit({
    authStrategy: createOAuthUserAuth,
    auth: {
      clientId: process.env.GITHUB_CLIENT_ID,
      clientSecret: process.env.GITHUB_CLIENT_SECRET,
      token: authResult.token,
      refreshToken: authResult.refreshToken,
      expiresAt: authResult.expiresAt,
      tokenType: authResult.tokenType,
    },
  });

  // Get user information
  const user = await userOctokit.rest.users.getAuthenticated();
  const username = user.data.login;
  console.log("Authenticated user:", username);

  // Create session object
  const sessionData: UserSession = {
    login: username,
    accessToken: authResult.token,
    refreshToken: authResult.refreshToken || null,
    expiresAt: authResult.expiresAt || null,
    tokenType: authResult.tokenType || "bearer",
    createdAt: new Date(),
  };

  // Generate session ID and store in Redis
  const sessionId = crypto.randomUUID();
  await sessionStore.saveSession(sessionId, sessionData);

  // Calculate expiry time for cookie (optional, can be session cookie)
  const cookieExpiry = authResult.expiresAt
    ? new Date(authResult.expiresAt).toUTCString()
    : undefined;

  // Return a response with a session cookie
  const headers = new Headers();
  const cookieOptions = [`session=${sessionId}`, "Path=/", "SameSite=Strict"];

  if (cookieExpiry) {
    cookieOptions.push(`Expires=${cookieExpiry}`);
  }

  headers.append("Set-Cookie", cookieOptions.join("; "));